The U.S. Department of Commerce updated the frequently asked questions section of its EU-U.S. Privacy Shield agreement site to cover developments with Brexit. For a company to receive personal data from the U.K., it will need to update its Privacy Shield commitments to cover the country and ensure it maintains a current certification. The timeframe for companies to fulfill these requirements will depend on whether the U.K. and European Union reach an agreement. Should the two sides reach a consensus, companies will have until Dec. 31, 2020, to take the necessary steps. In the event of a “no deal” Brexit, entities will have until either April 12 or May 22, 2019, to perform the two required tasks. Editor's Note: The IAPP has a "no deal" Brexit infographic hosted in our Resource Center.
Full Story